All news

3 articles

Min score

newsLobsters·24 Oct 20264.3
This week's "node2shell" Brotli vulnerability (CVE-2026-111497) is exploitable in Python, other consumers of Brotli
The node2shell Brotli bug CVE-2026-111497 also affects Python and other Brotli consumers, not just Node.
vulnerability-research supply-chain-security compression
newsBleepingComputer·25 Oct 20264.0
AI coding agents hijacked using AGENTS.md file in Downloads folder
A malicious AGENTS.md file in a Downloads folder made a coding agent install a rogue npm package. Researchers reproduced it against OpenAI Codex and showed a related trick against Claude.
coding-agents LLM Security supply-chain-security
newsBleepingComputer·23 Oct 20263.9
LiteLLM release pipeline hacked to distribute info-stealer malware
Attackers compromised LiteLLM release pipeline and shipped PyPI packages and Docker images with credential stealers.
Also in The Register
supply-chain-security llm-gateway